pulumi-gcp 7.23.0a1715621482__py3-none-any.whl → 7.23.0a1715808346__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (42) hide show
  1. pulumi_gcp/__init__.py +24 -0
  2. pulumi_gcp/bigquery/table.py +47 -0
  3. pulumi_gcp/bigtable/__init__.py +1 -0
  4. pulumi_gcp/bigtable/_inputs.py +101 -0
  5. pulumi_gcp/bigtable/authorized_view.py +440 -0
  6. pulumi_gcp/bigtable/outputs.py +119 -0
  7. pulumi_gcp/certificateauthority/certificate_template.py +70 -0
  8. pulumi_gcp/cloudbuildv2/repository.py +2 -2
  9. pulumi_gcp/clouddeploy/_inputs.py +96 -0
  10. pulumi_gcp/clouddeploy/custom_target_type.py +46 -0
  11. pulumi_gcp/clouddeploy/delivery_pipeline.py +7 -7
  12. pulumi_gcp/clouddeploy/outputs.py +96 -1
  13. pulumi_gcp/clouddeploy/target.py +54 -7
  14. pulumi_gcp/compute/_inputs.py +689 -0
  15. pulumi_gcp/compute/firewall_policy_rule.py +125 -10
  16. pulumi_gcp/compute/network_firewall_policy_rule.py +125 -10
  17. pulumi_gcp/compute/outputs.py +684 -0
  18. pulumi_gcp/compute/region_network_firewall_policy_rule.py +125 -10
  19. pulumi_gcp/compute/region_security_policy_rule.py +230 -1
  20. pulumi_gcp/container/_inputs.py +67 -3
  21. pulumi_gcp/container/outputs.py +93 -4
  22. pulumi_gcp/dataflow/flex_template_job.py +7 -7
  23. pulumi_gcp/dataflow/job.py +7 -7
  24. pulumi_gcp/iam/_inputs.py +191 -2
  25. pulumi_gcp/iam/outputs.py +197 -2
  26. pulumi_gcp/iam/workforce_pool_provider.py +245 -0
  27. pulumi_gcp/integrationconnectors/__init__.py +1 -0
  28. pulumi_gcp/integrationconnectors/managed_zone.py +753 -0
  29. pulumi_gcp/networkconnectivity/__init__.py +1 -0
  30. pulumi_gcp/networkconnectivity/regional_endpoint.py +946 -0
  31. pulumi_gcp/networksecurity/firewall_endpoint.py +34 -0
  32. pulumi_gcp/networksecurity/firewall_endpoint_association.py +24 -0
  33. pulumi_gcp/networksecurity/security_profile.py +16 -0
  34. pulumi_gcp/networksecurity/security_profile_group.py +18 -0
  35. pulumi_gcp/networksecurity/tls_inspection_policy.py +16 -0
  36. pulumi_gcp/orgpolicy/policy.py +2 -2
  37. pulumi_gcp/pubsub/subscription.py +4 -4
  38. pulumi_gcp/pulumi-plugin.json +2 -1
  39. {pulumi_gcp-7.23.0a1715621482.dist-info → pulumi_gcp-7.23.0a1715808346.dist-info}/METADATA +1 -1
  40. {pulumi_gcp-7.23.0a1715621482.dist-info → pulumi_gcp-7.23.0a1715808346.dist-info}/RECORD +42 -39
  41. {pulumi_gcp-7.23.0a1715621482.dist-info → pulumi_gcp-7.23.0a1715808346.dist-info}/WHEEL +0 -0
  42. {pulumi_gcp-7.23.0a1715621482.dist-info → pulumi_gcp-7.23.0a1715808346.dist-info}/top_level.txt +0 -0
pulumi_gcp/compute/region_network_firewall_policy_rule.py CHANGED
@@ -27,11 +27,13 @@ class RegionNetworkFirewallPolicyRuleArgs:
27
27
  project: Optional[pulumi.Input[str]] = None,
28
28
  region: Optional[pulumi.Input[str]] = None,
29
29
  rule_name: Optional[pulumi.Input[str]] = None,
30
+ security_profile_group: Optional[pulumi.Input[str]] = None,
30
31
  target_secure_tags: Optional[pulumi.Input[Sequence[pulumi.Input['RegionNetworkFirewallPolicyRuleTargetSecureTagArgs']]]] = None,
31
- target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
32
+ target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
33
+ tls_inspect: Optional[pulumi.Input[bool]] = None):
32
34
  """
33
35
  The set of arguments for constructing a RegionNetworkFirewallPolicyRule resource.
34
- :param pulumi.Input[str] action: The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny" and "goto_next".
36
+ :param pulumi.Input[str] action: The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny", "goto_next" and "apply_security_profile_group".
35
37
  :param pulumi.Input[str] direction: The direction in which this rule applies. Possible values: INGRESS, EGRESS
36
38
  :param pulumi.Input[str] firewall_policy: The firewall policy of the resource.
37
39
  :param pulumi.Input['RegionNetworkFirewallPolicyRuleMatchArgs'] match: A match condition that incoming traffic is evaluated against. If it evaluates to true, the corresponding 'action' is enforced.
@@ -45,6 +47,9 @@ class RegionNetworkFirewallPolicyRuleArgs:
45
47
  :param pulumi.Input[str] project: The project for the resource
46
48
  :param pulumi.Input[str] region: The location of this resource.
47
49
  :param pulumi.Input[str] rule_name: An optional name for the rule. This field is not a unique identifier and can be updated.
50
+ :param pulumi.Input[str] security_profile_group: A fully-qualified URL of a SecurityProfileGroup resource. Example:
51
+ https://networksecurity.googleapis.com/v1/organizations/{organizationId}/locations/global/securityProfileGroups/my-security-profile-group.
52
+ It must be specified if action = 'apply_security_profile_group' and cannot be specified for other actions.
48
53
  :param pulumi.Input[Sequence[pulumi.Input['RegionNetworkFirewallPolicyRuleTargetSecureTagArgs']]] target_secure_tags: A list of secure tags that controls which instances the firewall rule applies to. If <code>targetSecureTag</code> are
49
54
  specified, then the firewall rule applies only to instances in the VPC network that have one of those EFFECTIVE secure
50
55
  tags, if all the target_secure_tag are in INEFFECTIVE state, then this rule will be ignored.
@@ -52,6 +57,8 @@ class RegionNetworkFirewallPolicyRuleArgs:
52
57
  <code>targetServiceAccounts</code> nor <code>targetSecureTag</code> are specified, the firewall rule applies to all
53
58
  instances on the specified network. Maximum number of target label tags allowed is 256.
54
59
  :param pulumi.Input[Sequence[pulumi.Input[str]]] target_service_accounts: A list of service accounts indicating the sets of instances that are applied with this rule.
60
+ :param pulumi.Input[bool] tls_inspect: Boolean flag indicating if the traffic should be TLS decrypted. It can be set only if action =
61
+ 'apply_security_profile_group' and cannot be set for other actions.
55
62
  """
56
63
  pulumi.set(__self__, "action", action)
57
64
  pulumi.set(__self__, "direction", direction)
@@ -70,16 +77,20 @@ class RegionNetworkFirewallPolicyRuleArgs:
70
77
  pulumi.set(__self__, "region", region)
71
78
  if rule_name is not None:
72
79
  pulumi.set(__self__, "rule_name", rule_name)
80
+ if security_profile_group is not None:
81
+ pulumi.set(__self__, "security_profile_group", security_profile_group)
73
82
  if target_secure_tags is not None:
74
83
  pulumi.set(__self__, "target_secure_tags", target_secure_tags)
75
84
  if target_service_accounts is not None:
76
85
  pulumi.set(__self__, "target_service_accounts", target_service_accounts)
86
+ if tls_inspect is not None:
87
+ pulumi.set(__self__, "tls_inspect", tls_inspect)
77
88
 
78
89
  @property
79
90
  @pulumi.getter
80
91
  def action(self) -> pulumi.Input[str]:
81
92
  """
82
- The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny" and "goto_next".
93
+ The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny", "goto_next" and "apply_security_profile_group".
83
94
  """
84
95
  return pulumi.get(self, "action")
85
96
 
@@ -210,6 +221,20 @@ class RegionNetworkFirewallPolicyRuleArgs:
210
221
  def rule_name(self, value: Optional[pulumi.Input[str]]):
211
222
  pulumi.set(self, "rule_name", value)
212
223
 
224
+ @property
225
+ @pulumi.getter(name="securityProfileGroup")
226
+ def security_profile_group(self) -> Optional[pulumi.Input[str]]:
227
+ """
228
+ A fully-qualified URL of a SecurityProfileGroup resource. Example:
229
+ https://networksecurity.googleapis.com/v1/organizations/{organizationId}/locations/global/securityProfileGroups/my-security-profile-group.
230
+ It must be specified if action = 'apply_security_profile_group' and cannot be specified for other actions.
231
+ """
232
+ return pulumi.get(self, "security_profile_group")
233
+
234
+ @security_profile_group.setter
235
+ def security_profile_group(self, value: Optional[pulumi.Input[str]]):
236
+ pulumi.set(self, "security_profile_group", value)
237
+
213
238
  @property
214
239
  @pulumi.getter(name="targetSecureTags")
215
240
  def target_secure_tags(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['RegionNetworkFirewallPolicyRuleTargetSecureTagArgs']]]]:
@@ -239,6 +264,19 @@ class RegionNetworkFirewallPolicyRuleArgs:
239
264
  def target_service_accounts(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
240
265
  pulumi.set(self, "target_service_accounts", value)
241
266
 
267
+ @property
268
+ @pulumi.getter(name="tlsInspect")
269
+ def tls_inspect(self) -> Optional[pulumi.Input[bool]]:
270
+ """
271
+ Boolean flag indicating if the traffic should be TLS decrypted. It can be set only if action =
272
+ 'apply_security_profile_group' and cannot be set for other actions.
273
+ """
274
+ return pulumi.get(self, "tls_inspect")
275
+
276
+ @tls_inspect.setter
277
+ def tls_inspect(self, value: Optional[pulumi.Input[bool]]):
278
+ pulumi.set(self, "tls_inspect", value)
279
+
242
280
 
243
281
  @pulumi.input_type
244
282
  class _RegionNetworkFirewallPolicyRuleState:
@@ -256,11 +294,13 @@ class _RegionNetworkFirewallPolicyRuleState:
256
294
  region: Optional[pulumi.Input[str]] = None,
257
295
  rule_name: Optional[pulumi.Input[str]] = None,
258
296
  rule_tuple_count: Optional[pulumi.Input[int]] = None,
297
+ security_profile_group: Optional[pulumi.Input[str]] = None,
259
298
  target_secure_tags: Optional[pulumi.Input[Sequence[pulumi.Input['RegionNetworkFirewallPolicyRuleTargetSecureTagArgs']]]] = None,
260
- target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
299
+ target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
300
+ tls_inspect: Optional[pulumi.Input[bool]] = None):
261
301
  """
262
302
  Input properties used for looking up and filtering RegionNetworkFirewallPolicyRule resources.
263
- :param pulumi.Input[str] action: The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny" and "goto_next".
303
+ :param pulumi.Input[str] action: The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny", "goto_next" and "apply_security_profile_group".
264
304
  :param pulumi.Input[str] description: An optional description for this resource.
265
305
  :param pulumi.Input[str] direction: The direction in which this rule applies. Possible values: INGRESS, EGRESS
266
306
  :param pulumi.Input[bool] disabled: Denotes whether the firewall policy rule is disabled. When set to true, the firewall policy rule is not enforced and
@@ -276,6 +316,9 @@ class _RegionNetworkFirewallPolicyRuleState:
276
316
  :param pulumi.Input[str] region: The location of this resource.
277
317
  :param pulumi.Input[str] rule_name: An optional name for the rule. This field is not a unique identifier and can be updated.
278
318
  :param pulumi.Input[int] rule_tuple_count: Calculation of the complexity of a single firewall policy rule.
319
+ :param pulumi.Input[str] security_profile_group: A fully-qualified URL of a SecurityProfileGroup resource. Example:
320
+ https://networksecurity.googleapis.com/v1/organizations/{organizationId}/locations/global/securityProfileGroups/my-security-profile-group.
321
+ It must be specified if action = 'apply_security_profile_group' and cannot be specified for other actions.
279
322
  :param pulumi.Input[Sequence[pulumi.Input['RegionNetworkFirewallPolicyRuleTargetSecureTagArgs']]] target_secure_tags: A list of secure tags that controls which instances the firewall rule applies to. If <code>targetSecureTag</code> are
280
323
  specified, then the firewall rule applies only to instances in the VPC network that have one of those EFFECTIVE secure
281
324
  tags, if all the target_secure_tag are in INEFFECTIVE state, then this rule will be ignored.
@@ -283,6 +326,8 @@ class _RegionNetworkFirewallPolicyRuleState:
283
326
  <code>targetServiceAccounts</code> nor <code>targetSecureTag</code> are specified, the firewall rule applies to all
284
327
  instances on the specified network. Maximum number of target label tags allowed is 256.
285
328
  :param pulumi.Input[Sequence[pulumi.Input[str]]] target_service_accounts: A list of service accounts indicating the sets of instances that are applied with this rule.
329
+ :param pulumi.Input[bool] tls_inspect: Boolean flag indicating if the traffic should be TLS decrypted. It can be set only if action =
330
+ 'apply_security_profile_group' and cannot be set for other actions.
286
331
  """
287
332
  if action is not None:
288
333
  pulumi.set(__self__, "action", action)
@@ -310,16 +355,20 @@ class _RegionNetworkFirewallPolicyRuleState:
310
355
  pulumi.set(__self__, "rule_name", rule_name)
311
356
  if rule_tuple_count is not None:
312
357
  pulumi.set(__self__, "rule_tuple_count", rule_tuple_count)
358
+ if security_profile_group is not None:
359
+ pulumi.set(__self__, "security_profile_group", security_profile_group)
313
360
  if target_secure_tags is not None:
314
361
  pulumi.set(__self__, "target_secure_tags", target_secure_tags)
315
362
  if target_service_accounts is not None:
316
363
  pulumi.set(__self__, "target_service_accounts", target_service_accounts)
364
+ if tls_inspect is not None:
365
+ pulumi.set(__self__, "tls_inspect", tls_inspect)
317
366
 
318
367
  @property
319
368
  @pulumi.getter
320
369
  def action(self) -> Optional[pulumi.Input[str]]:
321
370
  """
322
- The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny" and "goto_next".
371
+ The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny", "goto_next" and "apply_security_profile_group".
323
372
  """
324
373
  return pulumi.get(self, "action")
325
374
 
@@ -474,6 +523,20 @@ class _RegionNetworkFirewallPolicyRuleState:
474
523
  def rule_tuple_count(self, value: Optional[pulumi.Input[int]]):
475
524
  pulumi.set(self, "rule_tuple_count", value)
476
525
 
526
+ @property
527
+ @pulumi.getter(name="securityProfileGroup")
528
+ def security_profile_group(self) -> Optional[pulumi.Input[str]]:
529
+ """
530
+ A fully-qualified URL of a SecurityProfileGroup resource. Example:
531
+ https://networksecurity.googleapis.com/v1/organizations/{organizationId}/locations/global/securityProfileGroups/my-security-profile-group.
532
+ It must be specified if action = 'apply_security_profile_group' and cannot be specified for other actions.
533
+ """
534
+ return pulumi.get(self, "security_profile_group")
535
+
536
+ @security_profile_group.setter
537
+ def security_profile_group(self, value: Optional[pulumi.Input[str]]):
538
+ pulumi.set(self, "security_profile_group", value)
539
+
477
540
  @property
478
541
  @pulumi.getter(name="targetSecureTags")
479
542
  def target_secure_tags(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['RegionNetworkFirewallPolicyRuleTargetSecureTagArgs']]]]:
@@ -503,6 +566,19 @@ class _RegionNetworkFirewallPolicyRuleState:
503
566
  def target_service_accounts(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
504
567
  pulumi.set(self, "target_service_accounts", value)
505
568
 
569
+ @property
570
+ @pulumi.getter(name="tlsInspect")
571
+ def tls_inspect(self) -> Optional[pulumi.Input[bool]]:
572
+ """
573
+ Boolean flag indicating if the traffic should be TLS decrypted. It can be set only if action =
574
+ 'apply_security_profile_group' and cannot be set for other actions.
575
+ """
576
+ return pulumi.get(self, "tls_inspect")
577
+
578
+ @tls_inspect.setter
579
+ def tls_inspect(self, value: Optional[pulumi.Input[bool]]):
580
+ pulumi.set(self, "tls_inspect", value)
581
+
506
582
 
507
583
  class RegionNetworkFirewallPolicyRule(pulumi.CustomResource):
508
584
  @overload
@@ -520,8 +596,10 @@ class RegionNetworkFirewallPolicyRule(pulumi.CustomResource):
520
596
  project: Optional[pulumi.Input[str]] = None,
521
597
  region: Optional[pulumi.Input[str]] = None,
522
598
  rule_name: Optional[pulumi.Input[str]] = None,
599
+ security_profile_group: Optional[pulumi.Input[str]] = None,
523
600
  target_secure_tags: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['RegionNetworkFirewallPolicyRuleTargetSecureTagArgs']]]]] = None,
524
601
  target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
602
+ tls_inspect: Optional[pulumi.Input[bool]] = None,
525
603
  __props__=None):
526
604
  """
527
605
  The Compute NetworkFirewallPolicyRule resource
@@ -617,7 +695,7 @@ class RegionNetworkFirewallPolicyRule(pulumi.CustomResource):
617
695
 
618
696
  :param str resource_name: The name of the resource.
619
697
  :param pulumi.ResourceOptions opts: Options for the resource.
620
- :param pulumi.Input[str] action: The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny" and "goto_next".
698
+ :param pulumi.Input[str] action: The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny", "goto_next" and "apply_security_profile_group".
621
699
  :param pulumi.Input[str] description: An optional description for this resource.
622
700
  :param pulumi.Input[str] direction: The direction in which this rule applies. Possible values: INGRESS, EGRESS
623
701
  :param pulumi.Input[bool] disabled: Denotes whether the firewall policy rule is disabled. When set to true, the firewall policy rule is not enforced and
@@ -631,6 +709,9 @@ class RegionNetworkFirewallPolicyRule(pulumi.CustomResource):
631
709
  :param pulumi.Input[str] project: The project for the resource
632
710
  :param pulumi.Input[str] region: The location of this resource.
633
711
  :param pulumi.Input[str] rule_name: An optional name for the rule. This field is not a unique identifier and can be updated.
712
+ :param pulumi.Input[str] security_profile_group: A fully-qualified URL of a SecurityProfileGroup resource. Example:
713
+ https://networksecurity.googleapis.com/v1/organizations/{organizationId}/locations/global/securityProfileGroups/my-security-profile-group.
714
+ It must be specified if action = 'apply_security_profile_group' and cannot be specified for other actions.
634
715
  :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['RegionNetworkFirewallPolicyRuleTargetSecureTagArgs']]]] target_secure_tags: A list of secure tags that controls which instances the firewall rule applies to. If <code>targetSecureTag</code> are
635
716
  specified, then the firewall rule applies only to instances in the VPC network that have one of those EFFECTIVE secure
636
717
  tags, if all the target_secure_tag are in INEFFECTIVE state, then this rule will be ignored.
@@ -638,6 +719,8 @@ class RegionNetworkFirewallPolicyRule(pulumi.CustomResource):
638
719
  <code>targetServiceAccounts</code> nor <code>targetSecureTag</code> are specified, the firewall rule applies to all
639
720
  instances on the specified network. Maximum number of target label tags allowed is 256.
640
721
  :param pulumi.Input[Sequence[pulumi.Input[str]]] target_service_accounts: A list of service accounts indicating the sets of instances that are applied with this rule.
722
+ :param pulumi.Input[bool] tls_inspect: Boolean flag indicating if the traffic should be TLS decrypted. It can be set only if action =
723
+ 'apply_security_profile_group' and cannot be set for other actions.
641
724
  """
642
725
  ...
643
726
  @overload
@@ -763,8 +846,10 @@ class RegionNetworkFirewallPolicyRule(pulumi.CustomResource):
763
846
  project: Optional[pulumi.Input[str]] = None,
764
847
  region: Optional[pulumi.Input[str]] = None,
765
848
  rule_name: Optional[pulumi.Input[str]] = None,
849
+ security_profile_group: Optional[pulumi.Input[str]] = None,
766
850
  target_secure_tags: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['RegionNetworkFirewallPolicyRuleTargetSecureTagArgs']]]]] = None,
767
851
  target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
852
+ tls_inspect: Optional[pulumi.Input[bool]] = None,
768
853
  __props__=None):
769
854
  opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
770
855
  if not isinstance(opts, pulumi.ResourceOptions):
@@ -795,8 +880,10 @@ class RegionNetworkFirewallPolicyRule(pulumi.CustomResource):
795
880
  __props__.__dict__["project"] = project
796
881
  __props__.__dict__["region"] = region
797
882
  __props__.__dict__["rule_name"] = rule_name
883
+ __props__.__dict__["security_profile_group"] = security_profile_group
798
884
  __props__.__dict__["target_secure_tags"] = target_secure_tags
799
885
  __props__.__dict__["target_service_accounts"] = target_service_accounts
886
+ __props__.__dict__["tls_inspect"] = tls_inspect
800
887
  __props__.__dict__["kind"] = None
801
888
  __props__.__dict__["rule_tuple_count"] = None
802
889
  super(RegionNetworkFirewallPolicyRule, __self__).__init__(
@@ -822,8 +909,10 @@ class RegionNetworkFirewallPolicyRule(pulumi.CustomResource):
822
909
  region: Optional[pulumi.Input[str]] = None,
823
910
  rule_name: Optional[pulumi.Input[str]] = None,
824
911
  rule_tuple_count: Optional[pulumi.Input[int]] = None,
912
+ security_profile_group: Optional[pulumi.Input[str]] = None,
825
913
  target_secure_tags: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['RegionNetworkFirewallPolicyRuleTargetSecureTagArgs']]]]] = None,
826
- target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None) -> 'RegionNetworkFirewallPolicyRule':
914
+ target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
915
+ tls_inspect: Optional[pulumi.Input[bool]] = None) -> 'RegionNetworkFirewallPolicyRule':
827
916
  """
828
917
  Get an existing RegionNetworkFirewallPolicyRule resource's state with the given name, id, and optional extra
829
918
  properties used to qualify the lookup.
@@ -831,7 +920,7 @@ class RegionNetworkFirewallPolicyRule(pulumi.CustomResource):
831
920
  :param str resource_name: The unique name of the resulting resource.
832
921
  :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
833
922
  :param pulumi.ResourceOptions opts: Options for the resource.
834
- :param pulumi.Input[str] action: The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny" and "goto_next".
923
+ :param pulumi.Input[str] action: The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny", "goto_next" and "apply_security_profile_group".
835
924
  :param pulumi.Input[str] description: An optional description for this resource.
836
925
  :param pulumi.Input[str] direction: The direction in which this rule applies. Possible values: INGRESS, EGRESS
837
926
  :param pulumi.Input[bool] disabled: Denotes whether the firewall policy rule is disabled. When set to true, the firewall policy rule is not enforced and
@@ -847,6 +936,9 @@ class RegionNetworkFirewallPolicyRule(pulumi.CustomResource):
847
936
  :param pulumi.Input[str] region: The location of this resource.
848
937
  :param pulumi.Input[str] rule_name: An optional name for the rule. This field is not a unique identifier and can be updated.
849
938
  :param pulumi.Input[int] rule_tuple_count: Calculation of the complexity of a single firewall policy rule.
939
+ :param pulumi.Input[str] security_profile_group: A fully-qualified URL of a SecurityProfileGroup resource. Example:
940
+ https://networksecurity.googleapis.com/v1/organizations/{organizationId}/locations/global/securityProfileGroups/my-security-profile-group.
941
+ It must be specified if action = 'apply_security_profile_group' and cannot be specified for other actions.
850
942
  :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['RegionNetworkFirewallPolicyRuleTargetSecureTagArgs']]]] target_secure_tags: A list of secure tags that controls which instances the firewall rule applies to. If <code>targetSecureTag</code> are
851
943
  specified, then the firewall rule applies only to instances in the VPC network that have one of those EFFECTIVE secure
852
944
  tags, if all the target_secure_tag are in INEFFECTIVE state, then this rule will be ignored.
@@ -854,6 +946,8 @@ class RegionNetworkFirewallPolicyRule(pulumi.CustomResource):
854
946
  <code>targetServiceAccounts</code> nor <code>targetSecureTag</code> are specified, the firewall rule applies to all
855
947
  instances on the specified network. Maximum number of target label tags allowed is 256.
856
948
  :param pulumi.Input[Sequence[pulumi.Input[str]]] target_service_accounts: A list of service accounts indicating the sets of instances that are applied with this rule.
949
+ :param pulumi.Input[bool] tls_inspect: Boolean flag indicating if the traffic should be TLS decrypted. It can be set only if action =
950
+ 'apply_security_profile_group' and cannot be set for other actions.
857
951
  """
858
952
  opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
859
953
 
@@ -872,15 +966,17 @@ class RegionNetworkFirewallPolicyRule(pulumi.CustomResource):
872
966
  __props__.__dict__["region"] = region
873
967
  __props__.__dict__["rule_name"] = rule_name
874
968
  __props__.__dict__["rule_tuple_count"] = rule_tuple_count
969
+ __props__.__dict__["security_profile_group"] = security_profile_group
875
970
  __props__.__dict__["target_secure_tags"] = target_secure_tags
876
971
  __props__.__dict__["target_service_accounts"] = target_service_accounts
972
+ __props__.__dict__["tls_inspect"] = tls_inspect
877
973
  return RegionNetworkFirewallPolicyRule(resource_name, opts=opts, __props__=__props__)
878
974
 
879
975
  @property
880
976
  @pulumi.getter
881
977
  def action(self) -> pulumi.Output[str]:
882
978
  """
883
- The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny" and "goto_next".
979
+ The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny", "goto_next" and "apply_security_profile_group".
884
980
  """
885
981
  return pulumi.get(self, "action")
886
982
 
@@ -983,6 +1079,16 @@ class RegionNetworkFirewallPolicyRule(pulumi.CustomResource):
983
1079
  """
984
1080
  return pulumi.get(self, "rule_tuple_count")
985
1081
 
1082
+ @property
1083
+ @pulumi.getter(name="securityProfileGroup")
1084
+ def security_profile_group(self) -> pulumi.Output[Optional[str]]:
1085
+ """
1086
+ A fully-qualified URL of a SecurityProfileGroup resource. Example:
1087
+ https://networksecurity.googleapis.com/v1/organizations/{organizationId}/locations/global/securityProfileGroups/my-security-profile-group.
1088
+ It must be specified if action = 'apply_security_profile_group' and cannot be specified for other actions.
1089
+ """
1090
+ return pulumi.get(self, "security_profile_group")
1091
+
986
1092
  @property
987
1093
  @pulumi.getter(name="targetSecureTags")
988
1094
  def target_secure_tags(self) -> pulumi.Output[Optional[Sequence['outputs.RegionNetworkFirewallPolicyRuleTargetSecureTag']]]:
@@ -1004,3 +1110,12 @@ class RegionNetworkFirewallPolicyRule(pulumi.CustomResource):
1004
1110
  """
1005
1111
  return pulumi.get(self, "target_service_accounts")
1006
1112
 
1113
+ @property
1114
+ @pulumi.getter(name="tlsInspect")
1115
+ def tls_inspect(self) -> pulumi.Output[Optional[bool]]:
1116
+ """
1117
+ Boolean flag indicating if the traffic should be TLS decrypted. It can be set only if action =
1118
+ 'apply_security_profile_group' and cannot be set for other actions.
1119
+ """
1120
+ return pulumi.get(self, "tls_inspect")
1121
+